HP Sa3110 - VPN Server Appliance Getting Started Manual

Hp vpn server appliance sa3000 series - client deployment tool getting started guide
Hide thumbs Also See for Sa3110 - VPN Server Appliance:

Advertisement

hewlett-packard sa3000 series
vpn client deployment tool

getting started guide

Hewlett-Packard Company
HP: 5971-0888
P/N: A01447-003
March 2001

Advertisement

Table of Contents
loading

Summary of Contents for HP Sa3110 - VPN Server Appliance

  • Page 1: Getting Started Guide

    Hewlett-Packard Company HP: 5971-0888 P/N: A01447-003 March 2001...
  • Page 3 Except as provided in Hewlett-Packard Company's Terms and Conditions of Sale for such products, Hewlett-Packard Company assumes no liability whatsoever, and Hewlett-Packard Company disclaims any...
  • Page 5: Table Of Contents

    Index ............. . Index-1 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 6 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 7: Getting Started

    VPN Client Deployment Tool Components ........1-2 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 8 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 9: Getting Started

    Product Installation Tool. 6. Log in to the VPN Client Deployment Tool Manager. 7. Set up the VPN Client Deployment Tool for first-time use by adding a corporation entry. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 10: Vpn Client Deployment Tool Components

    • Service Pack 5 (or higher) for Windows NT • Access to SMTP mail services The VPN Client Deployment Tool Servlet performs the following functions: • Authenticates the remote user. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 11 This program creates a text file that contains a list of users that have been notified through the Deploy window of an available deployment. • Purge Audit Data Tool This program permanently erases all audit records from the database. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 12 Getting Started Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 13: Installing The Vpn Client Deployment Tool

    Installing the VPN Client Deployment Tool........2-5 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 14 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 15: Before You Install The Vpn Client Deployment Tool

    Web site that is hosting the VPN Client Deployment Tool. (This may be listed under “Default Web Site.”) 3. Right-click on SCRIPTS and select Properties. 4. Select the Virtual Directory tab. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 16 3. Right-click on SCRIPTS and select Properties. 4. Select the Virtual Directory tab. 5. Ensure that the Local Path field points to the correct scripts directory. For example, c\:Inetpub\scripts 6. Set Permissions to Execute (including script). Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 17: Installing The Vpn Client Deployment Tool

    3. Click Yes to accept the software license agreement. The Choose Destination Location dialog box appears. 4. Confirm the default destination ( C:\Program Files\HP ) or enter SA3000 VPN\VPN Client Deployment Tool another destination directory. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 18 IIS. To select the default directory, click Next. 7. Select the IIS WWW Publishing root directory that was created when you installed IIS. To select the default directory, click Next. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 19 Next, you need to use the installproduct.bat utility to copy the VPN Client software to your server. See “Installing the HP SA3000 Series VPN Client Software Files” on page 3-1 for detailed information. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 20 Installing the VPN Client Deployment Tool Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 21: Installing The Vpn Client Software Files

    Installing the VPN Client Software Files ........3-1 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 22 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 23: Installing The Vpn Client Software Files

    2. In the Start Menu, select Programs, Command Prompt. The command prompt window appears. 3. Type to select the <drive letter>:\JRun directory. cd jrun 4. Type with the correct <source> and installproduct <destination> parameters and press Enter. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 24 These directories are as follows: • client95 — indicates the Windows 95/98 compatible client • clientNT — indicates the Windows NT compatible client • client2k — indicates the Windows 2000 compatible client Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 25 Adding a User or Group Entry..........4-15 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 26 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 27: Using The Vpn Client Deployment Tool For The First Time

    Add at least one user or group profile to deploy information. You must include the user name, description, and a valid e- mail address. See "Adding a User or Group Entry" (page 4-15). Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 28: Creating An E-Mail Template File

    2. Go to the Setup window in the VPN Client Deployment Tool Manager and select the corporation that you are using for deployment. 3. Enter the full path and file name of the template file in the Email Template File field Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 29 HP SA3000 Series VPN Client software: ^webserverurl^ Enter the following user id and password in the login form: ^userid^ user id: ^password^ password: For further assistance, please contact customer support. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 30: Starting The Vpn Client Deployment Tool

    The database is installed as a service. 2. In the Windows NT or Windows 2000 Start menu, select Pro- grams, HP SA3000 VPN, HP SA3000 VCDT, Start Manager. The VPN Client Deployment Tool Login window appears. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 31: Logging In To The Vpn Client Deployment Tool Manager

    4. In the Corporation Selection dialog box, select a corporation entry in the drop-down list. Note: If only one corporation entry is defined, it is selected by default and opens automatically. 5. Click OK. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 32: Adding A Corporation Entry

    7. In the Sender's Email Address field, enter the VPN Client Deployment Tool administrator's e-mail address. Note: You cannot deploy without a valid e-mail address in this field. An invalid address results in a false deployment. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 33 Login automatically takes you to the Devices window. Note: The Continue Login button is not enabled unless you have input the basic required information in the Setup win- dow for your corporation. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 34: Adding A Device Entry

    Devices that have polling enabled appear with a plug connector symbol next to the device name. 11. Click Poll Devices to automatically populate the Tunnels sec- tion of your corporation’s configuration if you have pollable devices defined. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 35: Adding A Tunnel Entry

    8. In the Tunnel Type drop-down list, select either SST (Shiva® Smart Tunneling) or IPSec. 9. In the Protocol field, enter the type of protocol you want to use to establish a tunnel. The default protocol is UDP. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 36 12. In the Challenge Phrase field, enter the challenge phrase for the device. 13. Click Save. The tunnel entry you created appears in the list box, with the information you specified appearing in the appropriate columns. 4-10 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 37: Creating A Client Profile

    7. Click OK when the correct tunnel assignments have been made. 8. To configure additional tunnel settings, select the tunnel that you want to configure from the list. 9. Click Tunnel Settings. 4-11 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 38 ACL rule on the VPN device. See the VPN device doc- umentation for more information. 13. Enter the shared secret (password) for the ACL (Access Control List) on the VPN device. 4-12 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 39: Creating A Product Profile

    — This parameter disables the logon and does not prompt the user to log on to the VPN Client software dur- ing the Windows 95/98/2000 or Windows NT boot pro- cess. This is the default mode. 4-13 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 40 — This parameter indicates that the client does not minimize after logon. 9. Click Save. The Product Profile description appears in the description list box on the Product Profiles tab. 4-14 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 41: Adding A User Or Group Entry

    CA (Certificate Authority) Server Name, CA Server IP Address, CA CRL Update, CA Certifi- cate Renewal, and any tunnel assignments. 4-15 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 42 RADIUS user name in the Default Username field. • If you select CA Authentication, do the following: — In the Server Name field, enter a name for the Certificate Authority. 4-16 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 43 Certificate Authority settings. Then, select the Create Group check box. When you assign new users to the group, they have the same configuration. 4-17 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 44 Using the VPN Client Deployment Tool for the First Time 4-18 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
  • Page 45: Index

    4-15 ......shell logon parameter 4-13 ..starting VPN Client Deployment Tool ....... supported configurations .... IIS Scripts and Permission Types ..........installing ......before you install ........tunnels, adding Index-1 Hewlett-Packard SA3000 VPN Client Deployment Tool Getting Started Guide...
  • Page 46 User Report Tool ........users, adding 4-15 VPN Client Deployment Tool ........components ......database functions ......Manager functions ......Servlet functions .......... starting ..... using for the first time Index-2 Hewlett-Packard SA3000 VPN Client Deployment Tool Getting Started Guide...

This manual is also suitable for:

Sa3000 series

Table of Contents